Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137302e3234372e3132342e302f32322d3234203d3e20323730383134.roa
File:                     3137302e3234372e3132342e302f32322d3234203d3e20323730383134.roa (raw, json)
Hash identifier:          JAsr7+9ZG/mK1LWioFPM/52N1xmNjuTLNXvnJ0RsdEA=
Subject key identifier:   E8:31:FA:79:7C:5C:1D:0F:47:3C:CB:3D:7D:9F:20:03:6F:20:16:0A
Certificate issuer:       /CN=BEEE75E0F9E4E6469710A8194600F973BF1E6105
Certificate serial:       20923BAA4D155ACAFBFD72E9538A27FD5D6C79F9
Authority key identifier: BE:EE:75:E0:F9:E4:E6:46:97:10:A8:19:46:00:F9:73:BF:1E:61:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEEE75E0F9E4E6469710A8194600F973BF1E6105.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137302e3234372e3132342e302f32322d3234203d3e20323730383134.roa
Signing time:             Tue 30 Apr 2024 20:01:05 +0000
ROA not before:           Tue 30 Apr 2024 19:56:05 +0000
ROA not after:            Tue 29 Apr 2025 20:01:05 +0000
asID:                     270814
IP address blocks:        170.247.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/BEEE75E0F9E4E6469710A8194600F973BF1E6105.crl
                          rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/BEEE75E0F9E4E6469710A8194600F973BF1E6105.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEEE75E0F9E4E6469710A8194600F973BF1E6105.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:92:3b:aa:4d:15:5a:ca:fb:fd:72:e9:53:8a:27:fd:5d:6c:79:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEEE75E0F9E4E6469710A8194600F973BF1E6105
        Validity
            Not Before: Apr 30 19:56:05 2024 GMT
            Not After : Apr 29 20:01:05 2025 GMT
        Subject: CN=E831FA797C5C1D0F473CCB3D7D9F20036F20160A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:49:30:c4:87:6f:64:25:2b:b7:c0:19:56:f7:
                    74:8a:61:4f:75:ff:aa:70:a5:c1:8f:ef:25:3f:fa:
                    5d:7e:58:be:01:e8:06:14:c3:32:54:76:4a:6d:89:
                    ab:17:d6:c0:f6:f1:63:cd:b9:42:e2:11:b0:b4:7f:
                    47:0f:6e:da:8d:ca:72:39:8e:fc:f9:89:e8:6a:36:
                    2c:b8:f4:d4:e8:9d:15:23:a5:b5:de:b2:f7:5d:a4:
                    46:f9:58:93:90:65:08:35:1b:4a:72:48:e0:f1:a0:
                    d6:99:3c:6a:06:bc:b1:28:99:2a:b6:b7:b4:43:f2:
                    8b:52:c7:fd:af:ba:36:2c:1e:8c:e7:13:15:9f:61:
                    a6:be:4e:53:84:de:7a:41:a1:6a:3b:45:de:1e:f7:
                    eb:dc:ba:50:27:a3:ee:f5:94:0e:27:07:bd:72:4c:
                    a9:98:59:e6:11:f2:87:52:b7:fc:f4:b2:dc:ec:80:
                    3c:d8:81:59:50:00:d1:cc:3f:f5:4f:62:b9:cb:e8:
                    67:44:7d:ee:8f:60:b8:6c:a1:1c:1a:8d:75:c0:70:
                    5a:c6:68:29:59:b9:14:3d:bc:c9:a4:31:7b:f2:64:
                    0a:e1:ab:e9:76:f2:bf:6d:27:b3:b8:2d:2f:8c:59:
                    8a:9e:ba:52:9b:37:90:99:8f:43:40:de:5a:c2:f8:
                    66:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:31:FA:79:7C:5C:1D:0F:47:3C:CB:3D:7D:9F:20:03:6F:20:16:0A
            X509v3 Authority Key Identifier:
                keyid:BE:EE:75:E0:F9:E4:E6:46:97:10:A8:19:46:00:F9:73:BF:1E:61:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/BEEE75E0F9E4E6469710A8194600F973BF1E6105.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEEE75E0F9E4E6469710A8194600F973BF1E6105.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137302e3234372e3132342e302f32322d3234203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:92:c6:90:8d:a9:51:12:85:2a:1f:21:29:cf:0f:8d:fa:b4:
         2f:4a:b1:2d:94:b0:34:a2:a6:37:e3:a8:c8:a8:00:a2:6c:1f:
         a7:8a:0b:25:a8:39:52:a2:8e:14:0f:33:8f:b1:9d:56:91:ca:
         73:ba:ff:f6:a0:ba:67:ed:e6:b5:84:33:70:5b:d8:69:f4:90:
         5c:ca:20:53:5b:81:68:4f:8f:4f:f9:ab:e6:d7:f8:2b:b4:0e:
         a1:42:0f:65:43:b3:c8:5f:49:f4:b0:c1:5e:d0:98:46:ec:f0:
         2e:03:fb:aa:d9:3e:d3:c4:a4:60:e4:9d:85:56:80:eb:c0:56:
         c1:b9:b6:4b:6c:3f:4a:9d:b3:06:bf:26:04:91:a1:2a:a6:93:
         f7:18:8d:d2:22:7b:79:d0:23:c5:fe:0f:8a:e5:e3:a5:a9:5d:
         bb:67:b0:7e:c6:e3:38:6d:08:12:e8:de:f1:5a:a2:18:d8:d8:
         d7:1b:7a:7a:8c:d5:e3:75:86:50:ef:3d:40:24:18:58:d0:78:
         7e:6e:b5:9d:b3:52:ab:bb:38:6d:55:48:38:65:2f:48:d6:1a:
         38:c7:3f:e3:a6:cf:e2:ca:9c:cc:90:19:ad:ec:5e:81:37:6a:
         2f:d1:48:42:95:67:59:f5:0f:d2:22:a4:05:17:cb:1e:72:cf:
         eb:db:f1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:21 2024 by rpki-client on console-ams.rpki-client.org